Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
File: XAAsRHm7TJbiI0OZznH1YDRSmdA.mft (raw, json)
Hash identifier: JHHUf6bteBlTyv4O5Io++9u1sy2EgfYp7sFoxkUbFDE=
Subject key identifier: 05:67:A5:76:03:29:01:55:54:6A:0E:BA:9B:52:7C:F0:24:88:D3:08
Authority key identifier: 5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
Certificate issuer: /CN=5c002c4479bb4c96e2234399ce71f560345299d0
Certificate serial: 019655376507542EE85805BD652A71182108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
Manifest number: 0792
Signing time: Sun 20 Apr 2025 22:00:15 +0000
Manifest this update: Sun 20 Apr 2025 22:00:15 +0000
Manifest next update: Mon 21 Apr 2025 22:00:15 +0000
Files and hashes: 1: XAAsRHm7TJbiI0OZznH1YDRSmdA.crl (hash: dOWP6FwZta8t9ydX07h8sua+joygqMOKjELi1AzP6aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:65:07:54:2e:e8:58:05:bd:65:2a:71:18:21:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c002c4479bb4c96e2234399ce71f560345299d0
Validity
Not Before: Apr 20 22:00:15 2025 GMT
Not After : Apr 21 22:00:15 2025 GMT
Subject: CN=0567a57603290155546a0eba9b527cf02488d308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:06:87:6d:f9:62:44:86:f5:80:a8:5b:ba:
80:1c:d7:65:eb:de:c8:17:3c:b7:cc:a6:b5:58:aa:
ac:f4:fd:2a:01:b5:14:90:8e:ea:dc:35:f6:e1:b9:
15:e0:44:ab:6d:11:c5:c1:46:8f:27:a4:df:e7:5a:
80:ed:13:cc:1f:4d:8c:0f:c2:3f:73:4f:57:be:d3:
be:09:45:f3:4e:ac:6a:bf:0d:f8:82:c7:ff:50:9d:
93:b7:0c:5d:a3:aa:b8:66:9e:42:5a:c6:c5:63:93:
3d:d5:eb:55:a5:bd:f7:50:df:8f:8a:54:40:3a:7a:
e5:4d:d7:34:9e:1b:bc:10:ed:2c:9b:fb:c8:e5:63:
55:2e:96:45:c8:69:ac:f2:45:3a:26:30:b7:b3:39:
7e:c2:c3:6d:8a:ff:4d:9f:83:af:97:00:05:07:28:
08:85:38:28:d2:cd:18:a7:e3:bf:05:af:95:d4:e3:
ce:52:81:66:03:1a:67:d4:9f:08:d2:45:b4:34:f8:
97:51:3c:b0:04:28:3d:a1:9b:95:58:e2:09:5d:83:
ac:bc:b7:e2:b3:b3:3a:6c:0c:a7:40:35:87:b5:b3:
ca:b3:7e:0f:a4:48:02:00:3b:f2:ed:cf:40:3e:87:
4f:df:ef:47:96:25:41:02:d7:3b:40:bd:4e:13:63:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:67:A5:76:03:29:01:55:54:6A:0E:BA:9B:52:7C:F0:24:88:D3:08
X509v3 Authority Key Identifier:
keyid:5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:74:99:8b:fa:86:6e:90:ed:01:42:e6:fa:d8:2c:04:6b:8d:
be:06:f4:03:88:b1:8d:8c:7c:05:df:5a:bf:8b:89:78:95:be:
bf:8b:58:cd:85:58:d3:ec:a3:1b:6f:23:ae:f6:32:d2:bb:e8:
70:94:6c:78:9e:e3:48:55:d5:a5:79:07:96:d9:c9:12:db:d7:
c2:b2:90:c0:ed:3d:2e:ae:92:6a:4a:3b:2f:d7:8e:ae:b6:af:
cd:73:62:e1:71:4d:35:88:ce:c2:cb:5a:5d:4e:55:3f:a9:49:
ee:39:34:48:bf:4b:b7:b1:13:fa:01:bd:a8:4f:f7:33:78:d3:
89:65:d0:23:ab:a8:7c:f8:56:92:33:04:5b:2c:29:28:87:4e:
8e:d4:90:93:64:34:f4:d2:9a:d2:22:94:4f:e3:b5:d4:19:d9:
81:c3:a0:e0:91:2e:a2:51:49:da:44:d5:5f:c6:a0:9f:66:61:
de:89:39:a8:dc:a8:ae:a8:6e:b8:11:01:27:e0:12:77:97:d1:
a6:9a:5a:69:22:f6:dc:1d:86:a8:9d:39:79:a3:23:13:0d:d1:
68:f9:e4:57:4f:d4:2b:df:7d:1c:bf:8d:3a:6c:09:b4:74:20:
04:46:ae:cd:6b:70:8a:b4:ff:be:e1:dc:16:d3:f2:20:3e:d1:
ab:db:db:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:21 2025 by rpki-client